diff --git a/roles/grub/tasks/main.yml b/roles/grub/tasks/main.yml
index 4f15f65..ad9dbe7 100644
--- a/roles/grub/tasks/main.yml
+++ b/roles/grub/tasks/main.yml
@@ -4,5 +4,5 @@
 - name: configure grub
   block:
     - name: template out grub config
-      template: src=grub.conf dest=/etc/default/grub
+      template: src=grub.conf dest=/etc/default/grub mode=0644
       notify: grub mkconfig